auth become permissions, flipping strategy available on RestFul API, upgrade embbedded console